CVE-2025-9820

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: Jan 26, 2026
Source updated: Oct 14, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

gnutls

Vendor: Unknown
Product: Unknown
Platforms: Unknown
Default status: Unknown
Package: gnutls
Package collection: https://gitlab.com/gnutls/gnutls

gnutls · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.8.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.8.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.8.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.8.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.8.5	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.8.6	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.8.7	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.8.8	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.8.9	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.8.10	`affected`	Unavailable	Unavailable	Unavailable	None listed

Red Hat Enterprise Linux 10

Vendor: Red Hat
Product: Red Hat Enterprise Linux 10
Platforms: Unknown
Default status: affected
Package: gnutls
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 10 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.8.10-3.el10_1	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 8

Vendor: Red Hat
Product: Red Hat Enterprise Linux 8
Platforms: Unknown
Default status: affected
Package: gnutls
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.6.16-8.el8_10.5	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 8

Vendor: Red Hat
Product: Red Hat Enterprise Linux 8
Platforms: Unknown
Default status: affected
Package: gnutls
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.6.16-8.el8_10.5	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 9

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9
Platforms: Unknown
Default status: affected
Package: gnutls
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 9 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.8.3-10.el9_7	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 9

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9
Platforms: Unknown
Default status: affected
Package: gnutls
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 9 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.8.3-10.el9_7	`unaffected`	rpm	*	Unavailable	None listed

RHEL-8 based Middleware Containers

Vendor: Red Hat
Product: RHEL-8 based Middleware Containers
Platforms: Unknown
Default status: affected
Package: rhpam-7/rhpam-businesscentral-monitoring-rhel8
Package collection: https://catalog.redhat.com/software/containers/

RHEL-8 based Middleware Containers · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.13.5-4.1777325677	`unaffected`	rpm	*	Unavailable	None listed

RHEL-8 based Middleware Containers

Vendor: Red Hat
Product: RHEL-8 based Middleware Containers
Platforms: Unknown
Default status: affected
Package: rhpam-7/rhpam-businesscentral-rhel8
Package collection: https://catalog.redhat.com/software/containers/

RHEL-8 based Middleware Containers · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.13.5-4.1777325711	`unaffected`	rpm	*	Unavailable	None listed

RHEL-8 based Middleware Containers

Vendor: Red Hat
Product: RHEL-8 based Middleware Containers
Platforms: Unknown
Default status: affected
Package: rhpam-7/rhpam-controller-rhel8
Package collection: https://catalog.redhat.com/software/containers/

RHEL-8 based Middleware Containers · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.13.5-4.1777325710	`unaffected`	rpm	*	Unavailable	None listed

RHEL-8 based Middleware Containers

Vendor: Red Hat
Product: RHEL-8 based Middleware Containers
Platforms: Unknown
Default status: affected
Package: rhpam-7/rhpam-dashbuilder-rhel8
Package collection: https://catalog.redhat.com/software/containers/

RHEL-8 based Middleware Containers · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.13.5-3.1777325680	`unaffected`	rpm	*	Unavailable	None listed

RHEL-8 based Middleware Containers

Vendor: Red Hat
Product: RHEL-8 based Middleware Containers
Platforms: Unknown
Default status: affected
Package: rhpam-7/rhpam-kieserver-rhel8
Package collection: https://catalog.redhat.com/software/containers/

RHEL-8 based Middleware Containers · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.13.5-4.1777325709	`unaffected`	rpm	*	Unavailable	None listed

RHEL-8 based Middleware Containers

Vendor: Red Hat
Product: RHEL-8 based Middleware Containers
Platforms: Unknown
Default status: affected
Package: rhpam-7/rhpam-process-migration-rhel8
Package collection: https://catalog.redhat.com/software/containers/

RHEL-8 based Middleware Containers · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.13.5-4.1777325680	`unaffected`	rpm	*	Unavailable	None listed

RHEL-8 based Middleware Containers

Vendor: Red Hat
Product: RHEL-8 based Middleware Containers
Platforms: Unknown
Default status: affected
Package: rhpam-7/rhpam-smartrouter-rhel8
Package collection: https://catalog.redhat.com/software/containers/

RHEL-8 based Middleware Containers · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.13.5-4.1777325708	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.18

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.18
Platforms: Unknown
Default status: affected
Package: cert-manager/jetstack-cert-manager-acmesolver-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791459707	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.18

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.18
Platforms: Unknown
Default status: affected
Package: cert-manager/jetstack-cert-manager-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791459711	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.18

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.18
Platforms: Unknown
Default status: affected
Package: cert-manager/cert-manager-istio-csr-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791459759	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.18

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.18
Platforms: Unknown
Default status: affected
Package: cert-manager/cert-manager-operator-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1789029076	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.18

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.18
Platforms: Unknown
Default status: affected
Package: cert-manager/cert-manager-operator-bundle
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791966259	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Ceph Storage 8

Vendor: Red Hat
Product: Red Hat Ceph Storage 8
Platforms: Unknown
Default status: affected
Package: rhceph/rhceph-8-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Ceph Storage 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1774002867	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Discovery 2

Vendor: Red Hat
Product: Red Hat Discovery 2
Platforms: Unknown
Default status: affected
Package: discovery/discovery-server-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Discovery 2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1775668717	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Discovery 2

Vendor: Red Hat
Product: Red Hat Discovery 2
Platforms: Unknown
Default status: affected
Package: discovery/discovery-ui-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Discovery 2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1775675922	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Hardened Images

Vendor: Red Hat
Product: Red Hat Hardened Images
Platforms: Unknown
Default status: affected
Package: gnutls-main
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Hardened Images · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.8.12-1.1.hum1	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Insights proxy 1.5

Vendor: Red Hat
Product: Red Hat Insights proxy 1.5
Platforms: Unknown
Default status: affected
Package: insights-proxy/insights-proxy-container-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Insights proxy 1.5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1773685509	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Update Infrastructure 5

Vendor: Red Hat
Product: Red Hat Update Infrastructure 5
Platforms: Unknown
Default status: affected
Package: rhui5/cds-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Update Infrastructure 5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1773670073	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Update Infrastructure 5

Vendor: Red Hat
Product: Red Hat Update Infrastructure 5
Platforms: Unknown
Default status: affected
Package: rhui5/haproxy-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Update Infrastructure 5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1773672059	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Update Infrastructure 5

Vendor: Red Hat
Product: Red Hat Update Infrastructure 5
Platforms: Unknown
Default status: affected
Package: rhui5/installer-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Update Infrastructure 5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1773668803	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Update Infrastructure 5

Vendor: Red Hat
Product: Red Hat Update Infrastructure 5
Platforms: Unknown
Default status: affected
Package: rhui5/rhua-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Update Infrastructure 5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1773670137	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 6

Vendor: Red Hat
Product: Red Hat Enterprise Linux 6
Platforms: Unknown
Default status: affected
Package: gnutls
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Enterprise Linux 7

Vendor: Red Hat
Product: Red Hat Enterprise Linux 7
Platforms: Unknown
Default status: affected
Package: gnutls
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift Container Platform 4

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-8
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift Container Platform 4

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.